Now that public files are in `www`, protecting source files is useless